CVE-2012-4838

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-4838
IBM Flex System Chassis Management Module (CMM) and Integrated Management Module 2 (IMM2) allow local users to obtain sensitive information about (1) local accounts, (2) SSH private keys, (3) SSL/TLS private keys, (4) SNMPv3 communities, and (5) LDAP credentials by leveraging unspecified side effects of service or maintenance activity.

1.9 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 3.4 / Impact : 2.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/79020 Third Party Advisory VDB Entry
https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5092001 Broken Link
https://www.ibm.com/connections/blogs/PSIRT/entry/flex_system_chassis_management_module_cmm_and_integrated_management_module_2_imm2_potential_security_vulnerability_with_authentication_data_cve_2012_4838_ibm_flex_system8 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/79020 Third Party Advisory VDB Entry
https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5092001 Broken Link
https://www.ibm.com/connections/blogs/PSIRT/entry/flex_system_chassis_management_module_cmm_and_integrated_management_module_2_imm2_potential_security_vulnerability_with_authentication_data_cve_2012_4838_ibm_flex_system8 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:h:ibm:flex_system_chassis_management_module:-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:integrated_management_module_ii:-:*:*:*:*:*:*:*
History

21 Nov 2024, 01:43

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/79020 - Third Party Advisory, VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/79020 - Third Party Advisory, VDB Entry
References () https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5092001 - Broken Link () https://www-947.ibm.com/support/entry/myportal/docdisplay?lndocid=MIGR-5092001 - Broken Link
References () https://www.ibm.com/connections/blogs/PSIRT/entry/flex_system_chassis_management_module_cmm_and_integrated_management_module_2_imm2_potential_security_vulnerability_with_authentication_data_cve_2012_4838_ibm_flex_system8 - Vendor Advisory () https://www.ibm.com/connections/blogs/PSIRT/entry/flex_system_chassis_management_module_cmm_and_integrated_management_module_2_imm2_potential_security_vulnerability_with_authentication_data_cve_2012_4838_ibm_flex_system8 - Vendor Advisory
Information

Published : 2012-12-08 15:55

Updated : 2025-04-11 00:51

NVD link : CVE-2012-4838

Mitre link : CVE-2012-4838

CVE.ORG link : CVE-2012-4838

JSON object : View

Products Affected

ibm

  • flex_system_chassis_management_module
  • integrated_management_module_ii
CWE
NVD-CWE-noinfo